Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
867f45d96d2e27ee23745604893170d3_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
867f45d96d2e27ee23745604893170d3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
867f45d96d2e27ee23745604893170d3_JaffaCakes118
Size
2.8MB
MD5
867f45d96d2e27ee23745604893170d3
SHA1
398a4d8ec760976b83cc5e3da9fc9c407536c478
SHA256
02c4b8a5e0f4bfcf0e47012a0bebf6a0a85dcb3f2d0437c01a41a6ef9ef9d425
SHA512
25f8b39b57b76de0c58ec00cd07bf24b5343d6237421f1c8150b6fb3a5a5793e5600874fefd534249f2285d380158c1f67b4def9dfd3e2d5c4658ba9cad6df68
SSDEEP
49152:B0Iw0LtI64FK7nJ7vKAcGmGRkdCIWkm0iYl4/BFCpt/aigPyWTaZhn/Xos/sWefB:BJTNMGR+CIWkm0iYlI7s/sWcv
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F:\branches\5.4.1\Rhino\Safe\Bin\Win32\release\pdb\FuncAssistant.pdb
GetProcessImageFileNameW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0id@locale@std@@QAE@I@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?id@?$collate@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??_7facet@locale@std@@6B@
_Wcscoll
_Wcsxfrm
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
_Nan
_Inf
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??7ios_base@std@@QBE_NXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
??_7_Facet_base@std@@6B@
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
??1_Facet_base@std@@UAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??0_Container_base12@std@@QAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
?_Xruntime_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0_Locinfo@std@@QAE@HPBD@Z
?_Getname@_Locinfo@std@@QBEPBDXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Winerror_map@std@@YAPBDH@Z
memmove
_purecall
??3@YAXPAX@Z
_hypot
??2@YAPAXI@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
free
strchr
realloc
atof
memmove_s
wmemcpy_s
malloc
wcsnlen
memcpy_s
??_V@YAXPAX@Z
atoi
wcsrchr
fopen
fread
ftell
fseek
fclose
_wfopen_s
rewind
_except1
fwrite
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
wcschr
towlower
wcsstr
_vsnwprintf
towupper
_errno
strstr
memchr
tolower
toupper
_mktime64
_localtime64
_time64
rand
srand
fputc
??1exception@std@@UAE@XZ
_except_handler4_common
__CxxFrameHandler3
__clean_type_info_names_internal
_recalloc
strpbrk
_dtest
fprintf
localeconv
__iob_func
sprintf_s
modf
abort
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
??0exception@std@@QAE@XZ
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
wcsncpy
isalnum
wcstoul
_wcsicmp
swscanf_s
sscanf
_splitpath_s
_stricmp
_vswprintf_c_l
calloc
_beginthreadex
_wtoi
_wcsnicmp
?terminate@@YAXXZ
sprintf
_lock_file
setvbuf
fsetpos
fgetc
fflush
_fseeki64
fgetpos
ungetc
_unlock_file
memset
memcpy
_CxxThrowException
__RTDynamicCast
_initterm_e
GetModuleHandleExW
OutputDebugStringW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
FormatMessageW
GetFileSizeEx
LoadLibraryA
GlobalMemoryStatusEx
SetLastError
LocalFileTimeToFileTime
GetSystemTime
SystemTimeToFileTime
DosDateTimeToFileTime
FileTimeToDosDateTime
GetFileTime
ReadFile
SetEndOfFile
GetFileSize
SetFileAttributesW
DeleteFileW
GetWindowsDirectoryW
RemoveDirectoryW
SetCurrentDirectoryW
MoveFileW
GetCurrentDirectoryW
GetTempPathW
CopyFileW
SetFileTime
CreateDirectoryW
MoveFileExW
GetTempFileNameW
GetFullPathNameW
GlobalFree
GlobalAlloc
lstrcpyW
lstrcatW
lstrlenW
GetFileAttributesW
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
GetExitCodeProcess
CreateProcessW
LoadLibraryExW
ResumeThread
ReleaseMutex
FindNextFileW
FindClose
GetVolumeInformationW
GetDiskFreeSpaceW
ExpandEnvironmentStringsW
lstrcmpiW
GetSystemInfo
GetVersionExW
SearchPathW
OpenEventW
CreateEventW
ResetEvent
Sleep
SetEvent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
GetShortPathNameW
GetFileAttributesExW
GetLongPathNameW
FindFirstFileW
InterlockedExchangeAdd
MultiByteToWideChar
GetACP
WideCharToMultiByte
DeviceIoControl
LocalAlloc
GetSystemDirectoryW
GetTickCount
SetThreadExecutionState
GetDriveTypeW
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
CreateMutexW
GetProcessTimes
SystemTimeToTzSpecificLocalTime
GetPrivateProfileStringW
GetUserDefaultLangID
GetModuleHandleW
GetCurrentProcess
FileTimeToLocalFileTime
CreateFileMappingW
GetProcAddress
FileTimeToSystemTime
LoadLibraryW
FreeLibrary
QueryDosDeviceW
GetLogicalDriveStringsW
VirtualQuery
GetCurrentThreadId
GetLocalTime
CreateFileW
GetModuleFileNameW
WriteFile
SetFilePointer
SetProcessWorkingSetSize
TerminateProcess
OpenProcess
WaitForSingleObject
LocalFree
DeleteCriticalSection
LockResource
HeapSize
RaiseException
HeapDestroy
SizeofResource
GetProcessHeap
HeapFree
HeapAlloc
LoadResource
FindResourceW
FindResourceExW
HeapReAlloc
GetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
CloseHandle
WaitForMultipleObjects
GetLastError
OpenMutexW
DecodePointer
GetWindowThreadProcessId
UnregisterClassW
GetShellWindow
OpenDesktopW
FindWindowW
ExitWindowsEx
CloseDesktop
SwitchDesktop
FindWindowExW
GetWindow
SetForegroundWindow
GetWindowLongW
ShowWindow
IsWindow
IsWindowVisible
SendMessageW
GetWindowRect
GetFocus
GetParent
AttachThreadInput
WindowFromPoint
SetFocus
GetForegroundWindow
GetClassNameW
GetDesktopWindow
SetWindowPos
GetSystemMetrics
EqualSid
AdjustTokenPrivileges
FreeSid
RegOpenKeyExW
SetEntriesInAclW
AllocateAndInitializeSid
LookupPrivilegeValueW
SetNamedSecurityInfoW
GetTokenInformation
OpenProcessToken
LookupPrivilegeNameW
CloseServiceHandle
SetFileSecurityW
GetFileSecurityW
EnumServicesStatusExW
QueryServiceConfigW
QueryServiceConfig2W
ControlService
ChangeServiceConfigW
ChangeServiceConfig2W
OpenServiceW
OpenSCManagerW
DeleteService
RegCloseKey
CoTaskMemFree
CoCreateInstance
CoInitializeSecurity
SHGetFolderPathW
SHGetPathFromIDListW
CommandLineToArgvW
SysStringLen
VariantClear
SysFreeString
SysAllocStringLen
VariantInit
SysAllocString
PathIsNetworkPathW
SHEnumValueW
PathFindFileNameW
PathRemoveFileSpecW
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ